Cyberattacks on Portuguese public sector databases

A series of cyberattacks has targeted Portuguese public sector databases, resulting in the exposure of significant amounts of personal information.

In early October, a breach occurred via a development server belonging to an IT service provider. This attack exposed approximately 120 gigabytes of unclassified data related to Portuguese intelligence agencies, including the Sistema de Informações da República Portuguesa (SIRP), the Serviço de Informações de Segurança (SIS), and the Serviço de Informações Estratégicas de Defesa (SIED). The leaked dataset, consisting of over 312,000 files, reportedly contains personal details such as names, tax IDs, and contact information linked to professional applications.

Later in the month, the National Emergency and Civil Protection Authority (ANEPC) confirmed a separate attack on the National Census of Portuguese Firefighters (RNBP) database. The breach resulted in the unauthorized access and copying of sensitive personal information, including full names, citizen card numbers, tax identification, social security numbers, health user IDs, driver's licenses, marital status, dates of birth, contact details, addresses, images, and blood types. While the Liga dos Bombeiros Portugueses (LBP) noted that the system does not store banking information, the breadth of the exposed data is significant.

In response, the RNBP application was suspended. The ANEPC, the National Cybersecurity Center (CNCS), and the National Internal Security Network (RNSI) are working to reinforce security systems. Authorities have issued an alert to regional commands and firefighters to exercise extreme caution regarding potential phishing, smishing, vishing, and quishing attempts involving suspicious links or unexpected communications.